ATACNAV Procurement and Repair STATEMENT OF WORK DRAFT.pdf

STATEMENT OF WORK

C.1 Introduction

The Naval Surface Warfare Center Dahlgren Division (NSWCDD), Weapons Control and Integration

Department (H), Unmanned and Expeditionary Weapon System Division (H40), Battle Management

System (BMS) Program currently fields various versions of the Advanced Tactical Navigator

(ATACNAV) systems onboard various Department of Defense (DOD) agency platforms; including land, air, and sea platforms. These programs currently utilize the capabilities of the ATACNAV to retrieve position, velocity, and altitude of these various militarized platforms. BMS Programs have sourced over

500 Advance Tactical Navigation (ATACNAV) units. New projects will utilize the existing systems that include the ATACNAV units. Furthermore, legacy platforms will require an update to existing subsystems or repair of fielded units from downrange and test and integration sites.

C.2 Scope

The primary purpose of this contract is to procure ATACNAV systems for use of integrating the currently proven weapon systems and to perform upgrades and repairs of already fielded units. Additionally, as

H40 systems improve their capabilities and advance competition in industry with weapons and guns, test and integration support is required. The technical specifications of each type of these events will be identified in the individual orders. All requirements shall include work pertaining to the various models of the ATACNAV.

C.2.1 Applicable Documents

2.1.1 The following documents are applicable to this SOW. The most recent versions of these documents are accessible through the internet or will be provided to the Contractor upon request.

The Contractor shall insure compliance with the most current versions of these documents throughout the life of the Task Order:

• Federal Occupational Safety and Health Agency (OSHA) Regulations, Environmental Protection

Agency (EPA) Regulations, NSWCDDINST 5100.1 Occupational Safety and Health Instruction

(current revision)

C.3 Requirements

C.3.1 Hardware Deliverables

Hardware deliverables shall be the primary focus of this contract. The configurations of existing hardware consist of Global Navigation Satellite System (GNSS), Transcoded Global Positioning System (GPS), GPS/Inertial Navigation System (GPS/INS), Selective Availability Anti-Spoofing Module

(SAASM)/Military-Code (M-Code) Tactical, SAASM M- Code ATACNAV High Accuracy (HA), SAASM M-Code ATACNAV High Accuracy Single Enclosure (HA-SE) and SAASM M-Code

Miniaturized (ATACNAV-Mini). Due to the End of Life (EOL) of SAASM receivers, efforts are needed to work towards the insertion of SAASM/M-Code receivers and Atomic Alternate Navigation (ALT-

NAV).

The Contractor shall deliver materials identified in Section B of this contract including Selective Anti-

Spoofing Module (SAASM) ATACNAV M-Code Tactical, SAASM M-Code HA, SAASM M-Code HA-

SE, SAASM ATACNAV M-Code Atomic Alternate Navigation (ALT-NAV), ATACNAV-Mini, Reconfigurable Avionics Test Sets (RATS), and RATS cables. These materials are subject to change as

DRAFT

internal components become obsolete and technology advances. Specific quantities and required delivery dates will be identified within each individual Delivery Order.

C.3.2 Upgrades

The Contractor shall perform the SAASM/ M-Code GPS Receiver upgrades to units already fielded in the fleet.

The Contractor shall perform other upgrades and retrofits in regards to the operating systems, firmware versions, hardware, and software. The technical requirements regarding these types of upgrades will be called out in each individual Delivery Order. The purpose of these types of upgrades is to complete the feedback loop on overall weapon system performance provided from the user. Delivery dates of each

ATACNAV upgrade deliverable will be provided within each individual Delivery Order. Tasks will be prioritized depending on the current schedule of the program.

C.3.3 Non-Recurring Engineering and Development

The Contractor shall facilitate the design to replace EOL units to develop the required Atomic ALT-NAV solution. In correlation with the design, the Contractor shall redesign units already fielded in the fleet and deliver upgrades to fielded ATACNAV units. ATACNAV unit configurations shall be derived from research, prototyping and developmental stages across Unmanned and Expeditionary Weapon System

Division (H40). These units shall comprise future capability enhancements to include providing a variety of ATACNAV configurations to meet specific mission requirements, implementation of M-Code GPS capability into the ATACNAV products and provisioning for introduction the ALT-NAV capability.

The Contractor shall manufacture and deliver products and artifacts for design validation and verification.

These products shall include the fabrication of first articles to include ATACNAV and variants of current

ATACNAV units. The design validation cycle may consist of multiple iterations of a prototype build, which will incur a certain amount of Non-Recurring Engineering (NRE).

C.3.4 Failure Analysis

The Contractor shall perform preliminary disassembly, inspection, and testing on items returned for repair to determine if the items are repairable and provide analysis reports (CDRL A002).

The Contractor shall develop guidelines to identify and analyze the probability, causes, and consequences of failures (CDRL A003). The Government will provide guidelines for conducting any unusual or peculiar failure analysis within the individual Delivery Orders. Additionally, the Contractor shall prepare an analysis report describing, in detail, the problems encountered, what was done to resolve them, and any recommendations for product improvements or other subsequent actions (CDRL A003). The specific type of report required will be contained within the individual Delivery Orders.

The Contractor shall coordinate shipments and shipment preparations with appropriate transportation authorities. The Contractor shall receive, track, inventory, issue, and monitor all material, technical data, and logistics support throughout the entire acquisition process. The Contractor shall plan and coordinate the procurement and delivery of parts with vendors to ensure deliverables meet the required schedules.

The Contractor shall monitor the status of the orders and projected delivery dates of ordered material.

During active delivery orders, this information shall be included in the weekly status report (CDRL

A001).

The Contractor shall inform the Contracting Officer’s Representative (COR) of any long lead time parts that may cause the delivery schedule to be missed. This information shall be included in the weekly status report (CDRL A001).

C.3.5 Repair

The Contractor shall repair, restore, modify, replace, and package the ATACNAV parts, components, assemblies and associated hardware. Repaired items shall be capable of performing in the same manner as an identical new item, although it is not required to have the cosmetic appearance of newness. The

Contractor shall test the units received for upgrade prior to installing the upgrade modification kits. Units requiring repair shall be repaired under warranty unless the warranty period has expired. Delivery dates of each ATACNAV repair will be provided within each individual order. Tasks will be prioritized depending on the current schedule of the program.

C.3.6 Test and Integration Events

The Contractor shall attend test and integration events by providing a Subject Matter Expert (SME).

These events are necessary to demonstrate capabilities with the weapon systems. Some minor test and integration events shall occur at the Contractor’s facilities. Larger efforts are anticipated to occur in locations specified in Section C.6.

Specific details regarding the test and integration support, including number of people and location, will be provided in the individual Delivery Order.

The Contractor shall submit a Technical Report after completion of events (CDRL A003).

C.4 Place of Performance

Efforts under this contract shall be performed at Contractor facilities. Occasional short-term temporary duty may be required at other Government and Contractor field activities/commands as noted in C.6.

C.5 Project Reporting

The Contractor shall provide weekly status reports (CDRL A001) and monthly status reports (CDRL

A004).

C.6 Travel

As specified in each individual Delivery Order, the Contactor shall be required to travel in performance of this agreement to support test and integration events. The number of trips and types of personnel traveling shall be limited to the minimum required to accomplish work requirements and shall be approved by the

COR. All approved travel will be reimbursed in accordance with FAR 31.205-46, Travel Costs. Travel to the following locations is expected:

• Dahlgren, VA

• Clovis, NM

• Centennial, CO

C.7 Government Furnished Property (GFP)

The Government will furnish the Contractor with the necessary ATACNAV units that shall be repaired or upgraded. All GFP will be used exclusively for the purpose of this contract and shall be returned as specified in the individual Delivery Orders. Individual GFP will be tracked between the COR and

Contractor and reported on the Government Property Inventory Report (CDRL A005).

C.8 Shipping & Packing

The Contractor and Government shall follow packaging standards for delicate inertial instruments. This includes double-packing, using 200 lb. cardboard with at least one inch of foam or standard packing

“peanuts” between the internal box and external box. The Contractor shall prepare the shipment plan using Freight on Board (FOB) shipping.

C.9 Warranty

The Contractor shall provide a 12-month warranty for all repaired and modified components and associated materials and workmanship. The 12-month period shall begin the day the Contractor ships the

ATACNAV unit.

C.10 Security

C.10.1 Personnel providing direct technical support to this effort will be required to have at minimum a

DoD SECRET clearance. Interim clearances are acceptable. The Contractor will have access to information and compartments with a SECRET classification. All deliverables associated with this contract are unclassified unless otherwise specified. Access to classified spaces and material and generation of classified material shall be in accordance with the attached DD Form 254. The Department of Defense Contract Security Classification Specification (DD Form 254) provides the security classification requirements for this contract. The Contractor shall obtain facility and personnel security clearances as required by the National Industrial Security Program prior to starting to work on tasks requiring clearances. Access to classified spaces and material and generation of classified material shall be in accordance with the 32 Code of Federal Regulation (CFR) Part 117 and the NSWCDD Command

Security Manual. The Contractor must comply with guidelines specified on the DD254.

C.10.2 The Contractor shall require access to Communications Security (COMSEC) materials and equipment in order to use crypto keying material. In particular, crypto keying material is used to authorize

Global Positioning System (GPS) receivers to allow for tracking of encrypted satellites transmissions.

The Contractor is required to have a valid COMSEC account and access to the Defense Courier Service in order to have access to the crypto materials and equipment needed for storing and transferring crypto keying materials. Controlled Unclassified Information (CUI) to include Personally Identifiable

Information (PII) generated and/or provided under this Task Order shall be safeguarded and marked as specified in DoD Instruction 5200.48. All above accesses are needed to support and provide the repair, development, and maintenance of BMS requirements to support NSWCDD.

C.10.3 The Contractor shall possess and maintain a SECRET facility clearance as verified within the

National Industrial Security System (NISS).

C.10.4 The Contractor shall be responsible for safeguarding all Government information or property provided for Contractor use. At the end of each work period, Government information, facilities, equipment and materials shall be secured as specified by 32 CFR Part 117 and the NSWCDD Command

Security Manual. SECRET storage is required at the contractor’s facility in order to meet requirements of receiving and generating classified material in accordance with this contract.

C.10.5 Electronic Spillages (ES) are unacceptable and pose a risk to national security. An electronic spillage is defined as classified data placed on an information system (IS), media or hardcopy document possessing insufficient security controls to protect the data at the required classification level, thus posing a risk to national security (e.g., sensitive compartmented information (SCI) onto collateral, SECRET onto

Unclassified, etc). The contractor’s performance as it relates to ES will be evaluated by the Government.

ES reflects on the overall security posture of NSWCDD and a lack of attention to detail with regard to the handling of classified information of IS security discipline and will be reflected in the contractor's performance rating. In the event that a contractor is determined to be responsible for an ES, all direct and indirect costs incurred by the Government for ES remediation will be charged to the contractor.

C.10.6 NSWCDD Security will continue to be responsible for the corrective action plan in accordance with the security guidance reflected on the DOD Contract Security Classification Specification - DD254.

NSWCDD Security will identify the contractor facility and contract number associated with all electronic spillages during the investigation that involve contractor support. NSWCDD Security will notify the

Contracts Division with the Contractor facility name and contract number, incident specifics and associated costs for clean-up. The Contracting Officer will be responsible to work with the Contractor

Facility to capture the costs incurred during the spillage clean up. The Contractor is also responsible for taking Information Security Awareness training annually, via their Facility Security Officer (FSO), as part of the mandatory training requirements. If a spillage occurs additional training will be required to prevent recurrence.

C.10.7 Portable Electronic Devices (PEDs)

C.10.7.1 Non-government and/or personally owned portable electronic devices (PEDs) are prohibited in all NSWCDD buildings with the exception of personally owned cell phones which are authorized for use in spaces up to and including Controlled Access Areas. The Contractor shall ensure the onsite personnel remain compliant with this PED policy. NSWCDD instruction defines PEDs as the following: any electronic device designed to be easily transported, with the capability to store, record, receive or transmit text, images, video, or audio data in any format via any transmission medium. PED’s include, but are not limited to, pagers, laptops, radios, compact discs and cassette players/recorders. In addition, this includes removable storage media such as flash memory, memory sticks, multimedia cards and secure digital cards, micro-drive modules, ZIP drives, ZIP disks, CD-RWs, DVD-RWs, MP3 players, iPADs, digital picture frames, electronic book readers, kindle, nook, cameras, external hard dish drives, and floppy diskettes.

C.10.7.2 Personal Wearable Fitness Devices (PWFDs) marketed primarily as fitness or sleep devices are allowed in all Navy spaces where collateral non-Sensitive Compartmented Information (SCI), classified information is processed, stored, or discussed up to and including SECRET. User must ensure PWFD is compliant with all requirements in NAVADMIN 216/15, Cyber Hygiene Authorization to use Personal

Wearable Fitness Devices (e.g., FitBit, Jawbone UP, etc.) in Navy Spaces, dated 14 September 2015 and register PWFD in the NSWCDD Fitness Device Tracker.

C.10.7.3 Personnel requiring the use of Medical Portable Electronic Devices (MPEDS) must submit Form

NSWCDD 5239/4 for SCIF authorization to the SCIF authorizations to the Special Security Officer

(SSO). For SAFF, authorizations follow the guidance provided by the Government Special Access

Program Security Officer (GSSO). Authorizations for use in SAPFs that are co-utilized within NSWCDD

SCIFS require coordination between both the GSSO and SSO. For authorizations to use MPED in

Collateral Classified spaces, submit form to the Special Programs Branch, Code 1053.

C.10.7.4 PED’s belonging to an external organization shall not be connected to NSWCDD networks or infrastructure without prior approval from the NSWCDD Information Assurance and Compliance Branch.

This approval will be granted using the TARIS form and action tracker process.

C.10.7.5 Personally owned hardware or software shall not be connected or introduced to any NSWCDD hardware, network or information system infrastructure.

C.10.7.6 Navy-issued peripheral:

C.10.7.6.1 Government procured headsets with or without microphones must be wired, use either a 3.5 millimeter (mm) audio jack or universal serial bus (USB) port, cannot contain active-noise cancelling functionality and may be used on systems and may be used on systems of classification up to and including collateral Top Secret. The headsets are considered unclassified when unplugged, and must be unplugged when not in use within classified spaces or when classified discussions are taking place in unclassified spaces.

C.10.7.6.2 Government procured Bluetooth earbuds and headsets that do not require a USB dongle or any other physical connection to enable wireless connectivity are allowed for use on Government issued tablets, phones, and personal devices in telework environments or unclassified general office space where no classified discussion are occurring.

C.10.7.6.3 Web cameras may only be used on systems at the classification level of the space. For example, in a collateral SECRET open storage area an external web camera may be connected to the

SECRET workstation only. No camera pass is required for these devices.

C.10.7.6.4 Government provided printers and/or scanners are authorized in a telework environment.

Users must ensure that any paper or media containing CUI or unclassified information not authorized for public release is safeguarded by locking in a drawer, cabinet or room. CUI and unclassified information not approved for public release must be returned to the worksite for destruction.

C.10.7.6.5 Government issued peripherals may be used on personal devices.

C.10.7.6.6 While connected to any Navy network, whether on site or while in a telework environment, the use of headsets with microphones and web cameras are restricted to official Government duties.

C.10.8 Operations Security (OPSEC)

C.10.8.1 Contractor personnel shall follow OPSEC concepts and principles in the conduct of this requirement to protect critical information, personnel, facilities, equipment, and operations from compromise. All Contractors (including Sub-contractors) shall supplement their current security practices by requiring any personnel involved in executing this Task Order to complete Government-sponsored and administered Operations Security (OPSEC) training. In addition, all Contractors should be aware of the

Critical Information and Indicators List (CIIL) for the organization they are supporting as well as the

OPSEC plan for NSWCDD. These OPSEC requirements will be in effect throughout the life of the procurement from award through the conclusion of services at the end of the period of performance (PoP) or other procurement termination. The Contractor must immediately notify the Government upon the discovery of any nonconformance with the OPSEC Plan.

C.10.9 Privacy Program Training

C.10.9.1 Privacy Program Training. Privacy training is mandatory for all NSWCDD personnel (military, civilian, and Contractor) and must be completed annually. The Total Workforce Management System

(TWMS) is the official database for workforce training and is the preferred tool for taking and recording privacy act training. The Contractor is responsible for ensuring individual annual privacy training requirements are met.

C.11 ON-SITE ENVIRONMENTAL AWARENESS

C.11.1 The Contractor shall strictly adhere to all Federal, State and local laws and regulations, Executive

Orders, and Department of Defense and Navy policies.

C.11.2 The Contractor shall ensure that each Contractor employee who has been or will be issued a

Common Access Card (CAC) completes the annual NSWCDD Environmental Awareness Training

(EAT) within 30 days of commencing contract performance and annually thereafter as directed by their

NSWCDD training coordinator or their COR.

C.11.3 The Contractor shall ensure that each Contractor employee not required to complete the training described in part C.11.2 above (i.e., those who do not have and will not be issued a CAC) reads the

NSWCDD Environmental Policy Statement within 30 days of commencing contract performance. This document will be available from the COR, however, the policy is also provided on the publicly-available

NSWCDD website, https://www.navsea.navy.mil/Home/Warfare-Centers/NSWC-Dahlgren/Resources/.

C.11.4 Within 30 days of commencing contract performance, the Contractor shall certify by email to their

COR that the requirements captured by C.11.2 and C.11.3 above have been met. The e-mail shall include each employee name and work site and shall indicate which requirement each employee has satisfied.

C.11.5 Contractor copies of the records generated by the actions described above will be maintained and disposed of by the Contractor in accordance with Secretary of Navy Instruction (SECNAVINST)

5210.8F.

C.12 ON-SITE SAFETY REQUIREMENTS

C.12.1 The Contractor shall strictly adhere to Federal Occupational Safety and Health Agency (OSHA)

Regulations, Environmental Protection Agency (EPA) Regulations, NSWCDDINST 5100.1 Occupational

Safety and Health Instruction (current revision), and all applicable state and local requirements.

C.12.2 The Contractor shall ensure that each Contractor employee reads the document entitled, "Occupational Safety and Health (OSH) Policy Statement" within 30 days of commencing performance at

NSWCDD. This document is available at: https://navsea.navy.deps.mil/sites/wc-nswcdd/operations/InfrastructureDiv/SafetyEnvironmental/SitePages/Safety.aspx.

C.12.3 The Contractor shall provide each Contractor employee with the training required to do his/her job safely and in compliance with applicable regulations. The Contractor shall document and provide, upon request, qualifications, certifications, and licenses as required. Contractors conducting lead or asbestos abatement activities shall also provide a written abatement plan to the Safety & Environmental Branches for review and approval.

C.12.4 The Contractor shall provide each Contractor employee with the personal protective equipment required to do their job safely and in compliance with all applicable regulations.

C.12.5 Contractors working with ionizing radiation (radioactive material or machine sources) must comply with NAVSEA S0420-AA-RAD-010 (latest revision) [provided upon request]. Prior to bringing radioactive materials or machine sources on base, the Contractor must notify the Command Radiation

Safety Officer in the Safety Branch.

C.12.6 Contractors shall not procure hazardous material (HAZMAT) on behalf of NSWCDD without following the approved HAZMAT procurement process in ERP. For emergency HAZMAT purchases only, the Contractor shall alert the Safety & Environmental Branches and request a waiver to procure outside the HAZMAT procurement process. For emergency purchases, the Contractor shall submit an

Authorized Use List Addition form and the Safety Data Sheet to the Safety & Environmental Branches for approval. Once the HAZMAT arrives onsite, the Contractor shall alert the Environmental Branch so that it can be barcoded and added to the inventory.

C.12.7 HAZMAT owned by the Contractor and brought into NSWCDD work spaces for temporary use shall be reviewed and approved by the Safety & Environmental Branches prior to use. The Contractor shall submit the Safety Data Sheet that must be routed through the Government supervisor responsible for the specific work area. This HAZMAT must clearly be marked that it is Contractor owned and shall not be stored in NSWCDD spaces.

C.12.8 Applicable Contractors shall submit Total Case Incident Rate (TCIR) and Days Away, Restricted and Transfer (DART) rates for the past three years upon request by the Safety Office. A Contractor meets the definition of applicable if its employees worked 1,000 hours or more in any calendar quarter on site and where oversight is not directly provided in day-to-day activities by the command.

C.12.9 The Contractor shall report all work-related injuries/illnesses that occurred while working at

NSWCDD, or an off-site location (including shipboard), to the Safety Branch.

C.13 DIGITAL DELIVERY OF DATA

(a) Delivery by the Contractor to the Government of certain technical data and other information is now frequently required to be made in digital form rather than in hardcopy form. The method of delivery of such data and/or other information (i.e., in electronic, digital, paper hardcopy, or other form) shall not be deemed to affect in any way either the identity of the information (i.e., as “technical data” or “computer software”) or the Government’s and the Contractor’s respective rights therein.

(b) Whenever technical data and/or computer software deliverables required by this contract are to be delivered in digital form, any authorized, required, or permitted markings relating to the Government’s rights in and to such technical data and/or computer software must also be digitally included as part of the deliverable and on or in the same medium used to deliver the technical data and/or software. Such markings must be clearly associated with the corresponding technical data and/or computer software to which the markings relate and must be included in such a way that the marking(s) appear in human-readable form when the technical data and/or software is accessed and/or used. Such markings must also be applied in conspicuous human-readable form on a visible portion of any physical medium used to effect delivery of the technical data and/or computer software. Nothing in this paragraph shall replace or relieve the Contractor’s obligations with respect to requirements for marking technical data and/or computer software that are imposed by other applicable clauses such as, where applicable and without limitation, DFARS 252.227-7013 and/or DFARS 252.227-7014.

(c) Digital delivery means (such as but not limited to Internet tools, websites, shared networks, and the like) sometimes require, as a condition for access to and/or use of the means, an agreement by a user to certain terms, agreements, or other restrictions such as but not limited to “Terms of Use,” licenses, or other restrictions intended to be applicable to the information being delivered via the digital delivery means. The Contractor expressly acknowledges that, with respect to deliverables made according to this contract, no such terms, agreements, or other restrictions shall be applicable to or enforceable with respect to such deliverables unless such terms, agreements, or other restrictions expressly have been accepted in writing by the Procuring Contracting Officer; otherwise, the Government’s rights in and to such deliverables shall be governed exclusively by the terms of this contract.

C.14 Direct Charge of Materials and Equipment under CLINs 0002, 0006, 0010, and 0014

C.14.1 The term “material” includes supplies, parts, equipment, hardware, and Information Technology

(IT) resources including hardware, services, and software. During the performance of this contract, it will be necessary for the Contractor to procure materials to respond to the mission requirements listed in the

Statement of Work (SOW). Material costs shall be proposed in each individual Delivery Order proposal.

Any material provided by the Contractor is subject to the requirements of the FAR, DFARS, and the applicable Department of Navy regulations and instructions. Charges related to material costs may include general and administrative (G&A) expenses, but shall not include fee or profit.

C.14.2 The Government may identify Not to Exceed (NTE) ODC Material Costs for individual delivery orders issued under this effort. Where identified, the NTE material costs provide o=the maximum allowable costs of materials and shipping for that order.

C.14.3 The Contractor shall be responsible for providing a complete price or cost analysis of associated material costs. This analysis will thoroughly support a determination that the prices are fair and reasonable and how that conclusion was made. Proposal analysis guidelines in FAR 15.404 outline acceptable procedures that can be used to evaluate these prices/costs. The Contractor shall not enter into any binding agreements with suppliers until the Government has reviewed and concurred with this analysis. The analysis will be submitted electronically to the COR for review and approval, unless already provided as part of the Delivery Order cost proposal.

C.14.4 Other items related to Program Support materials needs should be identified in the initial proposal as being a direct charge or as being covered under indirect rates. All such direct charge ODCs shall be fully supported in the initial proposal and must be determined fair and reasonable.

C.15 LABOR TRIPWIRE

The Contractor shall monitor monthly average actual spend rates compared to monthly average fully burdened proposed rates for each Cost-Plus-Fixed-Fee Delivery Order on a per CLIN basis. The

Contractor shall advise the COR and the Contract Specialist, by email, of any variation of actual-to-proposed rate averages greater than 15 percent. The Contractor's notification shall include the following information:

(a) an actual vs. proposed average dollar per hour comparison;

(b) the percentage variation between the actual and proposed average;

(c) explanation of what is causing the variation;

(d) whether or not the Contractor expects this condition is temporary or permanent;

(e) the Contractor's plan for addressing and correcting the variation; and

(f) additional information as requested by the Government to assist in reporting per the NAVSEAINST

4200.19(b) or more recent subsequent NAVSEAINST revision.

C.16 TASK/DELIVERY ORDER PROPOSAL REQUIREMENTS

(a) The Contractor shall submit proposals for orders in response to written requests issued by the

Contracting Officer. Proposals shall be provided within ten (10) working days after receipt of the request.

The request will identify the projected order type and period of performance. For term-type orders, the

Government’s estimate of the labor mix and level-of-effort will be provided as well as the estimate for direct travel and materials. A copy of the Statement of Work with deliverable requirements will also be provided.

(b) Proposals shall contain, as a minimum, the following information. This requirement applies equally to the level of detail required from the prime Contractor and, if applicable, each proposed Sub-contractor.

Additional information, unique to the order will be specified in the request. This may include a requirement for a brief statement of technical approach and schedule for completion type orders.

(1) Proposed direct labor to include contract and Contractor labor category, proposed direct hours

(separately identified as regular and UT, if applicable), proposed hourly rate (undecremented and decremented), and extended direct labor dollars for each individual. For term orders, any variances from the Government estimate shall be addressed and justified.

(2) Other direct costs – For term orders, any variances from the Government estimate shall be identified and justified. For completion orders, a description and associated dollars for each ODC item shall be provided. In addition, provide the rationale for the amount proposed.

(3) Travel – For term orders, any variances from the Government estimate shall be identified and justified. For completion orders, identify the point of origin and destination, length of trip (including transit time), number of travelers, and number of trips. Costs shall be broken down into transportation, per diem, rental car, personal mileage, etc., with a total provided for each trip.

(4) Indirects – Provide rates and associated dollars for each proposed indirect pool (i.e, fringe, overhead, G&A, material handling, etc.)

(5) Include planned expenditure charts showing projected labor-hour and dollar expenditures on a monthly basis.

(c) The Contractor shall deliver to the Government all order proposals via electronic (Internet) transmission to the maximum extent practicable. Although not bearing original signatures, the

Government will consider all such deliveries to carry the same force and effect as if submitted in hard copy and bearing original signatures of the Contractor.

CLAUSES INCORPORATED BY FULL TEXT

C-202-H001 ADDITIONAL DEFINITIONS—BASIC (NAVSEA) (OCT 2018)

(a) Department - means the Department of the Navy.

(b) Commander, Naval Sea Systems Command - means the Commander of the Naval Sea Systems

Command of the Department of the Navy or his duly appointed successor.

(c) References to The Federal Acquisition Regulation (FAR) - All references to the FAR in this contract shall be deemed to also reference the appropriate sections of the Defense FAR Supplement (DFARS), unless clearly indicated otherwise.

(d) National Stock Numbers - Whenever the term Federal Item Identification Number and its acronym

FIIN or the term Federal Stock Number and its acronym FSN appear in the contract, order or their cited specifications and standards, the terms and acronyms shall be interpreted as National Item Identification

Number (NIIN) and National Stock Number (NSN) respectively which shall be defined as follows:

(1) National Item Identification Number (NIIN). The number assigned to each approved Item

Identification under the Federal Cataloging Program. It consists of nine numeric characters, the first two of which are the National Codification Bureau (NCB) Code. The remaining positions consist of a seven digit non-significant number.

(2) National Stock Number (NSN). The National Stock Number (NSN) for an item of supply consists of the applicable four-position Federal Supply Class (FSC) plus the applicable nine-position

NIIN assigned to the item of supply.

(End of Text)

C-204-H001 USE OF NAVY SUPPORT CONTRACTORS FOR OFFICIAL CONTRACT FILES

(NAVSEA) (OCT 2018)

(a) NAVSEA may use a file room management support contractor, hereinafter referred to as "the support contractor", to manage its file room, in which all official contract files, including the official file supporting this procurement, are retained. These official files may contain information that is considered a trade secret, proprietary, business sensitive or otherwise protected pursuant to law or regulation, hereinafter referred to as “protected information”. File room management services consist of any of the following: secretarial or clerical support; data entry; document reproduction, scanning, imaging, or destruction; operation, management, or maintenance of paper-based or electronic mail rooms, file rooms, or libraries; and supervision in connection with functions listed herein.

(b) The cognizant Contracting Officer will ensure that any NAVSEA contract under which these file room management services are acquired will contain a requirement that:

(1) The support contractor not disclose any information;

(2) Individual employees are to be instructed by the support contractor regarding the sensitivity of the official contract files;

(3) The support contractor performing these services be barred from providing any other supplies and/or services, or competing to do so, to NAVSEA for the period of performance of its contract and for an additional three years thereafter unless otherwise provided by law or regulation; and,

(4) In addition to any other rights the contractor may have, it is a third party beneficiary who has the right of direct action against the support contractor, or any person to whom the support contractor has released or disclosed protected information, for the unauthorized duplication, release, or disclosure of such protected information.

(c) Execution of this contract by the contractor is considered consent to NAVSEA's permitting access to any information, irrespective of restrictive markings or the nature of the information submitted, by its file room management support contractor for the limited purpose of executing its file room support contract responsibilities.

(d) NAVSEA may, without further notice, enter into contracts with other contractors for these services.

Contractors should enter into separate non-disclosure agreements with the file room contractor. Contact the Procuring Contracting Officer for contractor specifics. However, any such agreement will not be considered a prerequisite before information submitted is stored in the file room or otherwise encumber the government.

C-204-H002 IMPLEMENTATION OF ENHANCED SECURITY CONTROLS ON SELECT DEFENSE

INDUSTRIAL BASE PARTNER NETWORKS (NAVSEA) (JAN 2020)

1. System Security Plan and Plans of Action and Milestones (SSP/POAM) Reviews

a) Within thirty (30) days of contract award, the Contractor shall make its System Security Plan(s)

(SSP(s)) for its covered contractor information system(s) available for review by the Government at the contractor’s facility. The SSP(s) shall implement the security requirements in Defense Federal

Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which is included in this contract.

The Contractor shall fully cooperate in the Government’s review of the SSPs at the Contractor’s facility.

b) If the Government determines that the SSP(s) does not adequately implement the requirements of

DFARS clause 252.204-7012 then the Government shall notify the Contractor of each identified deficiency. The Contractor shall correct any identified deficiencies within thirty (30) days of notification by the Government. The contracting officer may provide for a correction period longer than thirty (30) days and, in such a case, may require the Contractor to submit a plan of action and milestones (POAM) for the correction of the identified deficiencies. The Contractor shall immediately notify the contracting officer of any failure or anticipated failure to meet a milestone in such a POAM.

c) Upon the conclusion of the correction period, the Government may conduct a follow-on review of the

SSP(s) at the Contractor’s facilities. The Government may continue to conduct follow-on reviews until the Government determines that the Contractor has corrected all identified deficiencies in the SSP(s).

d) The Government may, in its sole discretion, conduct subsequent reviews at the Contractor’s site to verify the information in the SSP(s). The Government will conduct such reviews at least every three (3) years (measured from the date of contract award) and may conduct such reviews at any time upon thirty

(30) days’ notice to the Contractor.

2. Compliance to NIST 800-171

a) The Contractor shall fully implement the CUI Security Requirements (Requirements) and associated

Relevant Security Controls (Controls) in NIST Special Publication 800-171 (Rev. 1) (NIST SP 800-171), or establish a SSP(s) and POA&Ms that varies from NIST 800-171 only in accordance with DFARS clause 252.204-7012(b)(2), for all covered contractor information systems affecting this contract.

b) Notwithstanding the allowance for such variation, the contractor shall identify in any SSP and

POA&M their plans to implement the following, at a minimum:

(1) Implement Control 3.5.3 (Multi-factor authentication). This means that multi-factor authentication is required for all users, privileged and unprivileged accounts that log into a network.

In other words, any system that is not standalone should be required to utilize acceptable multi-factor authentication. For legacy systems and systems that cannot support this requirement, such as CNC equipment, etc., a combination of physical and logical protections acceptable to the Government may be substituted;

(2) Implement Control 3.1.5 (least privilege) and associated Controls, and identify practices that the contractor implements to restrict the unnecessary sharing with, or flow of, covered defense information to its subcontractors, suppliers, or vendors based on need-to-know principles;

(3) Implement Control 3.1.12 (monitoring and control remote access sessions) - Require monitoring and controlling of remote access sessions and include mechanisms to audit the sessions and methods.

(4) Audit user privileges on at least an annual basis;

(5) Implement:

i. Control 3.13.11 (FIPS 140-2 validated cryptology or implementation of NSA or NIST approved algorithms (i.e. FIPS 140-2 Annex A: AES or Triple DES) or compensating controls as documented in a SSP and POAM); and,

ii. NIST Cryptographic Algorithm Validation Program (CAVP)

(see https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program);

(6) Implement Control 3.13.16 (Protect the confidentiality of CUI at rest) or provide a POAM for implementation which shall be evaluated by the Navy for risk acceptance.

(7) Implement Control 3.1.19 (encrypt CUI on mobile devices) or provide a plan of action for implementation which can be evaluated by the Government Program Manager for risk to the program.

3. Cyber Incident Response

a) The Contractor shall, within fifteen (15) days of discovering the cyber incident (inclusive of the 72-hour reporting period), deliver all data used in performance of the contract that the Contractor determines is impacted by the incident and begin assessment of potential warfighter/program impact.

b) Incident data shall be delivered in accordance with the Department of Defense Cyber Crimes Center

(DC3) Instructions for Submitting Media available at http://www.acq.osd.mil/dpap/dars/pgi/docs/Instructions_for_Submitting_Media.docx. In delivery of the incident data, the Contractor shall, to the extent practical, remove contractor-owned information from

Government covered defense information.

c) If the Contractor subsequently identifies any such data not previously delivered to DC3, then the

Contractor shall immediately notify the contracting officer in writing and shall deliver the incident data within ten (10) days of identification. In such a case, the Contractor may request a delivery date later than ten (10) days after identification. The contracting officer will approve or disapprove the request after coordination with DC3.

4. Naval Criminal Investigative Service (NCIS) Outreach

The Contractor shall engage with NCIS industry outreach efforts and consider recommendations for hardening of covered contractor information systems affecting DON programs and technologies.

5. NCIS/Industry Monitoring

a) In the event of a cyber incident or at any time the Government has indication of a vulnerability or potential vulnerability, the Contractor shall cooperate with the Naval Criminal Investigative Service

(NCIS), which may include cooperation related to: threat indicators; pre-determined incident information derived from the Contractor's infrastructure systems; and the continuous provision of all Contractor, subcontractor or vendor logs that show network activity, including any additional logs the contractor, DRAFT https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program http://www.acq.osd.mil/dpap/dars/pgi/docs/Instructions_for_Submitting_Media.docx subcontractor or vendor agrees to initiate as a result of the cyber incident or notice of actual or potential vulnerability.

b) If the Government determines that the collection of all logs does not adequately protect its interests, the

Contractor and NCIS will work together to implement additional measures, which may include allowing the installation of an appropriate network device that is owned and maintained by NCIS, on the

Contractor's information systems or information technology assets. The specific details (e.g., type of device, type of data gathered, monitoring period) regarding the installation of an NCIS network device shall be the subject of a separate agreement negotiated between NCIS and the Contractor. In the alternative, the Contractor may install network sensor capabilities or a network monitoring service, either of which must be reviewed for acceptability by NCIS. Use of this alternative approach shall also be the subject of a separate agreement negotiated between NCIS and the Contractor.

c) In all cases, the collection or provision of data and any activities associated with this statement of work shall be in accordance with federal, state, and non-US law.

C-211-H018 APPROVAL BY THE GOVERNMENT (NAVSEA) (JAN 2019)

Approval by the Government as required under this contract and applicable specifications shall not relieve the Contractor of its obligation to comply with the specifications and with all other requirements of the contract, nor shall it impose upon the Government any liability it would not have had in the absence of such approval.

C-227-H006 DATA REQUIREMENTS (NAVSEA) (OCT 2018)

The data to be furnished hereunder shall be prepared in accordance with the Contract Data Requirements

List, DD Form 1423, Exhibit(s) A, attached hereto.

C-227-H010 COMPUTER SOFTWARE AND COMPUTER DATA BASES DELIVERED TO OR

RECEIVED FROM THE GOVERNMENT (NAVSEA) (JAN 2019)

(a) The Contractor agrees to test for viruses, malware, Trojan Horses, and other security threats such as those listed in NIST Special Publication 800-12 Rev 1, An Introduction to Computer Security, The NIST

Handbook, Chapter 4, in all computer software and computer data bases (as defined in the clause entitled

“Rights In Noncommercial Computer Software and Noncommercial Computer Software Documentation”

(DFARS 252.227-7014)), before delivery of that computer software or computer data base in whatever media and on whatever system the computer software or data base is delivered whether delivered separately or imbedded within delivered equipment. The Contractor warrants that when delivered any such computer software and computer data base shall be free of viruses, malware, Trojan Horses, and other security threats such as those listed in NIST Special Publication 800-12 Rev 1.

(b) The Contractor agrees that prior to use under this contract, it shall test any computer software and computer data base received from the Government for viruses, malware, Trojan Horses, and other security threats listed in NIST Special Publication 800-12 Rev 1, An Introduction to Computer Security, The NIST Handbook, Chapter 4.

(c) Any license agreement governing the use of any computer software or computer software documentation delivered to the Government as a result of this contract must be paid-up, irrevocable, world-wide, royalty-free, perpetual and flexible (user licenses transferable among Government employees and personnel under Government contract).

(d) The Contractor shall not include or permit to be included any routine to enable the contractor or its subcontractor(s) or vendor(s) to disable the computer software or computer data base after delivery to the

Government.

(e) No copy protection devices or systems shall be used in any computer software or computer data base delivered under this contract with unlimited or Government purpose rights (as defined in DFARS

252.227-7013 and 252.227-7014) to restrict or limit the Government from making copies.

(f) It is agreed that, to the extent that any technical or other data is computer software by virtue of its delivery in digital form, the Government shall be licensed to use that digital-form data with exactly the same rights and limitations as if the data had been delivered as hard copy.

(g) Any limited rights legends or other allowed legends placed by a Contractor on technical data or other data delivered in digital form shall be digitally included on the same media as the digital-form data and must be associated with the corresponding digital-form technical data to which the legend(s) apply to the extent possible. Such legends shall also be placed in human-readable form on a visible surface of the media carrying the digital-form data as delivered, to the extent possible.

C-233-H001 DOCUMENTATION OF REQUESTS FOR EQUITABLE ADJUSTMENT--BASIC

(NAVSEA) (OCT 2018)

(a) For the purposes of this special contract requirement, the term "change" includes not only a change that is made pursuant to a written order designated as a "change order" but also (1) an engineering change proposed by the Government or by the Contractor and (2) any act or omission to act on the part of the

Government in respect of which a request is made for equitable adjustment.

(b) Whenever the Contractor requests or proposes an equitable adjustment of $100,000 or more per vessel in respect to a change made pursuant to a written order designated as a "change order" or in respect to a proposed engineering change and whenever the Contractor requests an equitable adjustment in any amount in respect to any other act or omission to act on the part of the Government, the proposal supporting such request shall contain the following information for each individual item or element of the request:

(1) A description (i) of the work required by the contract before the change, which has been deleted by the change, and (ii) of the work deleted by the change which already has been completed. The description is to include a list of components, equipment, and other identifiable property involved. Also, the status of manufacture, procurement, or installation of such property is to be indicated. Separate description is to be furnished for design and production work. Items of raw material, purchased parts, components and other identifiable hardware, which are made excess by the change and which are not to be retained by the

Contract…